Posts by georgied 6 publicly visible posts • joined 25 Apr 2014
Number spoofing is illegal in the UK but many of these come in from services outside the UK and there are no checks to validate the source. Although you think they would be able to validate UK numbers.
RCS may be the way forward and it's slowly replacing SMS in some parts.
https://en.wikipedia.org/wiki/Rich_Communication_Services
I hated the quandary of disclosing information to them as well. So I wrote to them and gave them their very own password, which I'd challenge them for. They stopped calling. Probably because they had no provision to store a password. It's probably buried deep in my notes somewhere..
The quick fix is to always require a PIN.
In the longer term, EAP-SIM is the way to go. Authentication is tied to the sim card, so will allow device swapping and should be significantly harder to spoof.
It's already being extensively developed as a means to auto authenticate to wifi hot spots, to try and offload data from the mobile networks.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2025
